Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File:                     3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier:          KpE43Pxn6F0Q1mMmZTb2Y6+Zy7qdtFu0ZqrTs987/Wo=
Subject key identifier:   BF:DF:BB:5D:D5:C1:B9:92:43:20:B5:97:6A:6A:70:BD:7A:12:46:7A
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer:       /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial:       01962FAB76732287974E4DD718744D0F7C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number:          04D7
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: ZD598vWBF1k31zpunG9gWvNjGrYniCEvcK7eW4ycMAE=)
                          2: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (hash: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:73:22:87:97:4e:4d:d7:18:74:4d:0f:7c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=bfdfbb5dd5c1b9924320b5976a6a70bd7a12467a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:09:a0:cb:9b:c8:16:ed:02:5d:b0:79:1f:
                    29:61:26:eb:4b:ed:8d:f4:60:1d:a9:e2:52:83:09:
                    b0:99:02:e5:a7:4f:99:45:b5:0d:aa:84:5e:66:fe:
                    c1:14:8a:88:2a:70:48:2a:40:fd:fc:9f:4f:71:b8:
                    f0:ef:f8:2e:0a:92:97:f3:95:b4:e3:bc:4c:5d:72:
                    a4:a1:34:2e:a0:07:9c:2a:93:1b:68:6b:1b:dd:f6:
                    65:c5:ea:6a:1a:08:c8:4c:11:d9:89:b7:ac:cc:33:
                    8e:cc:6c:5c:cb:ff:ff:8c:98:05:4b:31:dc:3d:c6:
                    7f:95:9e:24:8f:71:f0:fc:44:6f:a7:a0:e2:75:67:
                    c1:86:4d:4a:8f:6e:1c:9e:95:36:a9:6a:6c:ed:03:
                    02:df:7e:6e:01:bc:71:f5:65:73:18:b3:e5:2c:61:
                    2b:43:88:e7:7e:3d:7c:90:46:4e:7a:aa:6d:0c:43:
                    55:ae:76:d3:02:28:05:bc:14:b5:e1:81:60:2b:3e:
                    f5:a5:22:61:9a:05:bd:27:1a:e9:c0:90:f1:28:bd:
                    c6:43:41:4b:5b:90:1a:c2:23:1d:00:74:27:77:5b:
                    8b:bf:d1:2e:95:de:12:9d:e0:83:bc:7d:9b:d9:58:
                    4a:32:65:76:fa:70:a9:6d:42:bb:bb:9f:71:0f:9d:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DF:BB:5D:D5:C1:B9:92:43:20:B5:97:6A:6A:70:BD:7A:12:46:7A
            X509v3 Authority Key Identifier:
                keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:f1:64:84:34:09:84:29:2d:ee:f5:01:96:01:37:50:95:
         67:0f:55:db:92:57:23:14:36:f9:4b:84:5d:e9:e7:66:2e:9a:
         bd:63:b5:e9:e3:ba:0e:e2:1b:56:ec:8f:0e:af:54:a4:c3:87:
         cc:87:16:a8:66:65:04:25:fe:35:0b:8b:3f:df:8b:55:d7:4d:
         d4:cf:51:0d:6f:30:32:bd:2b:c7:03:76:11:51:d8:c6:05:a5:
         78:aa:96:8c:06:be:09:c1:9a:11:06:58:8e:39:41:57:d8:d3:
         5e:cf:95:c9:93:a6:a0:7b:10:b9:12:60:71:e1:d8:90:fe:05:
         e1:f2:5a:88:13:6d:c3:02:d3:79:ad:39:43:2f:1f:bf:7f:e4:
         11:e7:f6:8c:44:79:91:fd:3e:05:d4:15:b0:d5:8e:63:22:b8:
         25:93:6b:64:95:be:79:51:86:40:2d:2f:15:a8:58:6f:56:90:
         78:4b:20:18:4f:0b:53:16:ad:cc:61:26:bd:a5:ae:b2:27:97:
         03:49:d7:3d:11:f6:5e:a0:dc:21:10:da:70:3a:14:2e:55:14:
         0d:53:32:f7:bf:16:1a:bb:4e:6d:3d:0e:5a:b7:12:d7:ca:bd:
         cf:18:34:bd:de:40:bd:68:e5:54:34:77:61:c1:88:1e:25:e0:
         f4:7f:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----